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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

Claim 1 . (Currently Amended) An electronic commerce card authentication 
system comprising: 

a central transaction server wherein the central transaction server: 

receives an authentication request from a cardholder system , wherein the 
authentication request was previously forwarded using an HTTP redirect command comprising 
the address of the central transaction server, wherein the authentication request includes a 
pseudonym corresponding to an electronic commerce card account number, wherein the 
pseudonym expires after a predetermined period of time ; . 

forwards the authentication request to an access control server; 

relays authentication information between the access control server and 

the cardholder system; 

receives an authentication response from the access control server; 
forwards the authentication response to the cardholder system; and 
initiates a payment request process.. 

Claim 2. (Previously Presented) The electronic commerce card authentication 
system of claim 1, wherein the authentication response is translated to a format compatible with 
a merchant system. 

Claim 3. (Previously Presented) The electronic commerce card authentication 
system of claim 1, wherein the central transaction server forwards a copy of the authentication 
response to an authentication history server to be archived. 
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Claim 4. (Previously Presented) The electronic commerce card authentication 
system of claim 1, wherein the central transaction server further receives a verifying enrollment 
request from a directory server, and sends a verifying enrollment response to the directory server. 

Claim 5. (Previously Presented) The electronic commerce card authentication 
system of claim 4, wherein the central transaction server sends the verifying enrollment response 
in response to a query to the access control server. 

Claim 6. (Previously Presented) The electronic commerce card authentication 
system of claim 4, wherein the central transaction server sends the verifying enrollment response 
to the directory server with or without querying the access control server, and further queries the 
access control server in response to receiving an authentication request. 



Claim 7. (Currently Amended) The electronic commerce card authentication 
system of claim 1, wherein the authentication request includes a pseudonym was corresponding 
to an electronic commerce card account number and previously created by the central transaction 
server. 



Claim 8. (Currently Amended) The electronic commerce card authentication 
system of claim 1, wherein the authentication request includes a the pseudonym was previously 
created by a merchant system that corresponds to an electronic commerce card account number . 

Claim 9. (Canceled) 



Claim 10. (Currently Amended) A method of authenticating electronic commerce 
card information provided by a cardholder, the method comprising: 

receiving an authentication request from a cardholder system , wherein the 
authentication request was previously forwarded using an HTTP redirect command comprising 
the address of a central transaction server, wherein the authentication request includes a 
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pseudonym corresponding; to an electronic commerce card account number, wherein the 
pseudonym expires after a predetermined period of time ; 

forwarding the authentication request to an access control server; 

relaying authentication information between the access control server and the 
cardholder system; 

receiving an authentication response from the access control server; 

forwarding the authentication response to the cardholder system; and 

initiating a payment request process. 

Claim 1 1 . (Previously Presented) The method of claim 10, wherein the 
authentication response is translated to a format compatible with a merchant system. 

Claim 12. (Original) The method of claim 10, further comprising forwarding a 
copy of the authentication response to an authentication history server to be archived. 

Claim 13. (Original) The method of claim 10, further comprising receiving a 
verifying enrollment request from a directory server, and sending a verifying enrollment 
response to the directory server. 

Claim 14. (Original) The method of claim 13, wherein the verifying enrollment 
response is sent in response to a query to the access control server. 

Claim 15. (Original) The method of claim 13, wherein the verifying enrollment 
response is sent to the directory server without querying the access control server, and further 
comprising querying the access control server in response to receiving an authentication request. 

Claim 16. (Currently Amended) The method of claim 10, wherein the 
authentication request includ e s a pseudonym was previously created by the central transaction 
server that corresponds to an electronic commerce card account number . 
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Claim 17. (Currently Amended) The method of claim 10, wherein the 
authentication r e qu e st includes a pseudonym was previously created by a merchant system that 
corresponds to an electronic commerce card account numb e r . 



Claim 18. (Canceled) 



Claim 19. (Currently Amended) An information storage medium including a set 
of instructions to operate an information processing device to perform a set of steps, the set of 
steps comprising: 

receiving an authentication request from a cardholder system , wherein the 
authentication request was previously forwarded using an HTTP redirect command comprising 
the address of the central transaction server, wherein the authentication request includes a 
pseudonym corresponding to an electronic commerce card account number, wherein the 
pseudonym expires after a predetermined period of time ; 

forwarding the authentication request to an access control server; 

relaying authentication information between the access control server and the 
cardholder system; 

receiving an authentication response from the access control server; 

forwarding the authentication response to the cardholder system; and 

initiating a payment request process. 

Claim 20. (Previously Presented) The information storage medium of claim 19, 
wherein the authentication response is translated to a format compatible with a merchant system. 

Claim 21. (Original) The information storage medium of claim 19, wherein the set 
of steps further comprises forwarding a copy of the authentication response to an authentication 
history server to be archived. 
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Claim 22. (Original) The information storage medium of claim 19, wherein the 
set of steps further comprises receiving a verifying enrollment request from a directory server, 
and sending a verifying enrollment response to the directory server. 

Claim 23. (Original) The information storage medium of claim 22, wherein the 
verifying enrollment response is sent in response to a query to the access control server. 

Claim 24. (Original) The information storage medium of claim 22, wherein the 
verifying enrollment response is sent to the directory server without querying the access control 
server, and the set of steps further comprise querying the access control server in response to 
receiving an authentication request. 

Claim 25. (Currently Amended) The information storage medium of claim 19, 
wherein the auth e ntication r e qu e st includes a pseudonym was previously created by the central 
transaction server that corresponds to an e lectronic comm e rc e card account numb e r . 

Claim 26. (Currently Amended) The information storage medium of claim 19, 
wherein the authentication request includ e s a pseudonym was previously created by a merchant 
system that corresponds to an electronic commerc e card account number . 

Claim 27. (Canceled) 

Claim 28. (Original) The method of claim 14, further comprising: 
receiving the verifying enrollment response from the access control server in 
response to the query; and 

forwarding the verifying enrollment response to the directory server. 

Claim 29. (Original) The method of claim 28, further comprising: 
modifying the verifying enrollment response received from the access control 

server; and 
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forwarding the modified verifying enrollment response to the directory server. 
Claim 30. (Original) The information storage medium of claim 22, further 

comprising: 

receiving the verifying enrollment response from the access control server in 
response to the query; and 

forwarding the verifying enrollment response to the directory server. 

Claim 31. (Original) The information storage medium of claim 30, further 

comprising: 

modifying the verifying enrollment response received from the access control 

server; and 

forwarding the modified verifying enrollment response to the directory server. 

Claim 32. (Previously Presented) The system of claim 1 wherein the payment 
request process includes a charge request, wherein the charge request is generated by a merchant 
and is subsequently sent to an acquirer. 

Claim 33. (Previously Presented) The method of claim 10 wherein the payment 
request process includes a charge request, wherein the charge request is generated by a merchant 
and is subsequently sent to an acquirer. 

Claim 34. (Currently Amended) A method performed by a central transaction 
server, the method comprising: 

receiving a verifying enrollment request; 

sending the verifying enrollment request to an access control server; 
receiving a verifying enrollment response from the access control server; 
creating an altered verifying enrollment response comprising a pseudonym; 
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sending the altered verifying enrollment response to a merchant system, wherein 
the merchant system subsequently sends an authentication request including the pseudonym to a 
holder system , wherein the authentication request including the pseudonym sent to the holder 
system further comprises a web page containing a redirect command, wherein the redirect 
command is an HTTP redirect command, comprising the address of the central transaction 
server, wherein the pseudonym expires after a predetermined period of time ; 

receiving the authentication request with the pseudonym from the holder system; 

sending the authentication request with the pseudonym to the access control 

server; 

receiving an authentication response; and 

sending the authentication response to the holder system. 

Claim 35. (Previously Presented) The method of claim 34 wherein the holder 
system is a cardholder system. 

Claim 36. (Previously Presented) The method of claim 34 wherein after the 
authentication response is sent to the holder system, the holder system sends the authentication 
response to the merchant system. 

Claim 37. (Previously Presented) The method of claim 34 further comprising, 
after sending the authentication response, initiating a payment request process. 

Claim 38. (Previously Presented) The system of claim 1, wherein the central 
transaction server further hosts at least one web page. 

Claims 39.-40. (Canceled). 

Claim 41. (New) The system of claim 1 wherein the predetermined time is 5 

minutes. 
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Claim 42. (New) The method of claim 34 wherein the predetermined time is five 

minutes. 
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